Professor Simon

Cybersecurity Executive & Professor
🌐 Cyber & IT Beyond the Textbook
💼 Real-world career advice
🛠️ Lessons from the field

[Professor Simon @ProfSimonOnline]

Did you know that simulating a data-loss event can transform recovery planning into a strategic advantage? By testing restore procedures and validating recovery objectives, organizations can not only bounce back but bounce forward. What's your recovery strategy? #CyberResilience

[Professor Simon @ProfSimonOnline]

An impressive cybersecurity home lab doesn't always mean impressive skills. Following a tutorial is one thing. Explaining your decisions, troubleshooting problems, and showing what you learned is another. Build it, but make sure you understand it. #Cybersecurity #CareerTips

[Professor Simon @ProfSimonOnline]

Did you know legacy systems are a prime target for attackers? Abbott’s recent breach highlights that even limited access can expose sensitive health data. Ensure your older systems have strong segmentation and are patched regularly to reduce risks. #Cybersecurity

[Professor Simon @ProfSimonOnline]

Who owns AI governance at your company? If nobody has clear authority, you have a problem. Security, legal, IT, and the business may all be involved, but someone needs to make the call. AI governance is an ownership issue, not just a security one. #AIGovernance #TechRisk

[Professor Simon @ProfSimonOnline]

Did you know that AWS IAM now shows when your access keys were last used? This new visibility helps you manage security more effectively by keeping track of your credentials. Regularly review your access key statuses for a stronger security posture. #Cybersecurity

[Professor Simon @ProfSimonOnline]

Knowing cybersecurity theory isn't enough. In a scenario-based interview, slow down, ask clarifying questions, and explain your reasoning. The goal isn't just to know the answer. It's to show how you think. #Cybersecurity #InterviewTips

[Professor Simon @ProfSimonOnline]

Did you know that 3.7 million short-lived AWS resources are exposed publicly each year? These include sensitive snapshots and documents that are only open for minutes or even seconds. Regular audits can help catch these brief exposures. #Cybersecurity #CloudSecurity

[Professor Simon @ProfSimonOnline]

Treat tabletop findings like real postmortem actions. Assign owners and deadlines, then verify fixes at the next exercise. And vary your scenarios. Ransomware, vendor compromise, insider threat. Test your response process, not your memory. #IncidentResponse #Cybersecurity

[Professor Simon @ProfSimonOnline]

Did you know nearly 30% of ransomware attacks stem from weak passwords and missing MFA? Common defaults like 'admin' still pop up, leaving organizations vulnerable. Strengthening these basics is crucial to fend off attacks. #CyberSecurity

[Professor Simon @ProfSimonOnline]

Considering Computer Science or IT? Computer Science goes deeper into programming, algorithms, software development, and math. IT provides broader exposure across systems, networking, cloud, databases, and security. Choose based on the career you want. #ComputerScience #ITDegree

[Professor Simon @ProfSimonOnline]

Did you know that as of August 2, EU law requires clear disclosure when consumers interact with AI? This is crucial for compliance if you serve EU users. Make sure to update your product disclosures and content labeling to avoid legal pitfalls. #AIRegulations #Compliance

[Professor Simon @ProfSimonOnline]

Studying for a cybersecurity cert? Build something alongside it. A home lab, CTF write-up, or mock incident gives you something concrete to discuss in an interview. Don't just show what you know. Show how you apply it. #Cybersecurity #CareerTips

[Professor Simon @ProfSimonOnline]

Did you know that AI can now carry out cyberattacks with minimal human input? This shift toward autonomous cyber operations raises serious concerns. As threats evolve quickly, it's crucial to adopt advanced defenses. Are your security measures keeping pace? #Cybersecurity #AI

[Professor Simon @ProfSimonOnline]

Stop memorizing flowcharts. In cybersecurity interviews, practice thinking out loud under pressure. Explain your reasoning, ask questions, and know when to escalate. That's not weakness. It's good judgment. #Cybersecurity #InterviewTips

[Professor Simon @ProfSimonOnline]

Did you know? CompTIA just partnered with CSF to enhance global standards in AI certifications. This move signals a serious commitment to improved skills in AI across the globe. As the demand for AI expertise grows, staying certified is more crucial than ever. #AI #Certification

[Professor Simon @ProfSimonOnline]

Choosing a degree for a cybersecurity career? Cybersecurity gives you specialization, IT gives you breadth, and Computer Science goes deeper into computing and programming. None is automatically best. It depends on where you want to go. #Cybersecurity #ITCareers

[Professor Simon @ProfSimonOnline]

Did you know that while email phishing remains the top threat, channels like SMS and voice phishing are on the rise? Stay vigilant! Always verify communications, especially if they ask for sensitive info. Keep those accounts safe! 🔒 #Cybersecurity #PhishingTrends

[Professor Simon @ProfSimonOnline]

@DataSecChron Absolutely. Third-party access is a major part of the equation. Strong authentication helps protect the identity, but least privilege ensures that even legitimate access is limited to what is actually necessary. In healthcare, both are critical.

[Professor Simon @ProfSimonOnline]

Did you know a phishing attack on Xsolis exposed 1.4M patient records? This included sensitive data like Social Security numbers. It's crucial to enforce phishing-resistant authentication and tighten vendor access controls to safeguard patient information. #Cybersecurity

[Professor Simon @ProfSimonOnline]

A tabletop exercise that doesn't lead to change just documents the problems. And if you're only testing the technical team, you're missing the point. Real incidents involve legal, HR, communications, and leadership too. #IncidentResponse #Cybersecurity